Bug 1636395 - [RFE][nova][13]: Trusted Virtual Functions
Summary: [RFE][nova][13]: Trusted Virtual Functions
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-nova
Version: 8.0 (Liberty)
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: z4
: 13.0 (Queens)
Assignee: Stephen Finucane
QA Contact: Vadim Khitrin
URL:
Whiteboard:
: 1625904 1656073 1687560 (view as bug list)
Depends On: 1402584 1656073
Blocks: 1500557 1382052 1442136 1476900 1615667 1656071 1687560
TreeView+ depends on / blocked
 
Reported: 2018-10-05 10:11 UTC by Sahid Ferdjaoui
Modified: 2023-10-06 17:56 UTC (History)
33 users (show)

Fixed In Version: openstack-nova-17.0.7-3.el7ost
Doc Type: Enhancement
Doc Text:
This feature allows you to create instances with trusted SR-IOV virtual functions (VFs), such as changing the MAC address of the VF and enable promiscuous mode directly from the guest instance. These functions help you configure failover VFs for instances directly from the instance. To configure trusted mode for VFs, you first set the `trusted` value of the `[pci] passthrough_whitelist` JSON configuration option in nova.conf. You then create the port with the `trusted=true` attribute in the binding profile. Make sure that the `vnic-type` attribute has the `hw_veb` or `direct` values.
Clone Of: 1382052
Environment:
Last Closed: 2019-01-16 17:53:46 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 397932 0 'None' ABANDONED Allow instances to be booted with trusted virtual function 2020-09-23 09:24:54 UTC
Red Hat Issue Tracker OSP-11697 0 None None None 2021-12-10 18:01:41 UTC
Red Hat Product Errata RHBA-2019:0087 0 None None None 2019-01-16 17:54:04 UTC

Internal Links: 1669835

Comment 7 Edu Alcaniz 2018-11-12 11:30:38 UTC
*** Bug 1625904 has been marked as a duplicate of this bug. ***

Comment 10 Stephen Finucane 2018-12-04 16:50:28 UTC
*** Bug 1656073 has been marked as a duplicate of this bug. ***

Comment 22 Joe H. Rahme 2019-01-09 18:58:17 UTC
Testing trusted binding using an automation script[1]:

https://github.com/redhat-openstack/nfv-tempest-plugin/blob/devel/nfv_tempest_plugin/tests/scenario/test_nfv_sriov_usecases.py


	(overcloud) [stack@undercloud-0 ~]$ cat core_puddle_version
	2018-12-13.4

	overcloud) [stack@undercloud-0 ~]$ cat /etc/rhosp-release
	Red Hat OpenStack Platform release 13.0.4 (Queens)

	(overcloud) [stack@undercloud-0 ~]$ openstack server list --all
	+--------------------------------------+---------------------------------------------+--------+--------------------------------------------------------------------------------------+---------------------------------------+----------------------------------------------+
	| ID                                   | Name                                        | Status | Networks                                                                             | Image                                 | Flavor                                       |
	+--------------------------------------+---------------------------------------------+--------+--------------------------------------------------------------------------------------+---------------------------------------+----------------------------------------------+
	| 1f577b82-8030-482c-8ebf-2370557f9ca3 | tempest-TestSriovScenarios-server-183118695 | ACTIVE | dpdkmgmt=50.20.135.104, 10.35.141.84; sriovone=60.20.135.100; sriovtwo=70.20.135.108 | rhel-guest-image-7.5-192.x86_64.qcow2 | m1.medium.huge_pages_cpu_pinning_numa_node-0 |
	+--------------------------------------+---------------------------------------------+--------+--------------------------------------------------------------------------------------+---------------------------------------+----------------------------------------------+

	(overcloud) [stack@undercloud-0 ~]$ openstack port show tempest-port-smoke-313251186
	+-----------------------+--------------------------------------------------------------------------------------------------+
	| Field                 | Value                                                                                            |
	+-----------------------+--------------------------------------------------------------------------------------------------+
	| admin_state_up        | UP                                                                                               |
	| allowed_address_pairs |                                                                                                  |
	| binding_host_id       | compute-0.localdomain                                                                            |
	| binding_profile       | pci_slot='0000:05:0e.4', pci_vendor_info='8086:154c', physical_network='sriov-2', trusted='true' |
	| binding_vif_details   | port_filter='False', vlan='601'                                                                  |
	| binding_vif_type      | hw_veb                                                                                           |
	| binding_vnic_type     | direct                                                                                           |
	| created_at            | 2018-12-25T18:59:50Z                                                                             |
	| data_plane_status     | None                                                                                             |
	| description           |                                                                                                  |
	| device_id             | 1f577b82-8030-482c-8ebf-2370557f9ca3                                                             |
	| device_owner          | compute:nova                                                                                     |
	| dns_assignment        | None                                                                                             |
	| dns_name              | None                                                                                             |
	| extra_dhcp_opts       |                                                                                                  |
	| fixed_ips             | ip_address='70.20.135.108', subnet_id='4dcdb2fa-132b-431a-9e85-18cd64136d69'                     |
	| id                    | 7349e7dc-95c6-48a1-80a3-631f06ea1194                                                             |
	| ip_address            | None                                                                                             |
	| mac_address           | fa:16:3e:3b:db:7e                                                                                |
	| name                  | tempest-port-smoke-313251186                                                                     |
	| network_id            | df76e281-1bc7-4f10-8739-90eed178c391                                                             |
	| option_name           | None                                                                                             |
	| option_value          | None                                                                                             |
	| port_security_enabled | True                                                                                             |
	| project_id            | f1e3160201ee4d8bbdfae2db800ef3a7                                                                 |
	| qos_policy_id         | None                                                                                             |
	| revision_number       | 11                                                                                               |
	| security_group_ids    | 6214c912-e895-41cf-a9fb-c5c2463c491a                                                             |
	| status                | ACTIVE                                                                                           |
	| subnet_id             | None                                                                                             |
	| tags                  |                                                                                                  |
	| trunk_details         | None                                                                                             |
	| updated_at            | 2018-12-25T19:00:36Z                                                                             |
	+-----------------------+--------------------------------------------------------------------------------------------------+

Comment 24 errata-xmlrpc 2019-01-16 17:53:46 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0087

Comment 25 David Vallee Delisle 2019-03-11 18:08:59 UTC
*** Bug 1687560 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.